When a user logs on, they enter their personal user name (20 characters, case insensitive). The user must then enter a password (14 characters max, case sensitive). There are two user accounts installed by default.

  • Administrator
    The Administrator can change the overall configuration and security of the machine. In Unix terms, he has root access and can administer any portion of the system.
    It is important that you change the name of this account from the default Administrator to something else. Should anyone want to crack your security, having the user name is half the battle. The password for this account should be very strong. I recommend that it has at least 8 characters, uses upper and lower cases and has at least one number or symbol (such as + - ^, etc.).

  • Guest
    This is the other default account created when installing Windows NT. Unless you have a specific reason to have a guest account, I suggest you disable it. The Guest account does not allow configuration changes. Any changes used during the sessions are discarded once the guest logs off. The password is blank as a default, but can (and should) be changed.

To create a new user account in Windows NT, use the User Administration tool under start/programs/Administration Tools. Another way to create a user account is to copy a different but similar user account and edit the parameters. When you copy an account, the account description, group account memberships and profile settings are copied. The "User cannot change password" and "Password Never Expires" checkboxes are also copied to the new account. Items that are not copied are the user name and full name of user. The "User must change password at next logon" and "account disabled" checkboxes are blank.